Description
In Materialize through 1.0.0, XSS is possible via the Toast feature.
Recommendation
Update the @materializecss/materialize package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.1.0-alpha
- Patched version(s): 1.1.0-alpha
References
Could your website be exposed too?
SmartScanner can check your website for Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation - materialize-css - CVE-2019-11004
- Improper Neutralization of Input During Web Page Generation in CKEditor4 - CVE-2020-27193
- Improper Neutralization of Input During Web Page Generation in swagger-ui - CVE-2016-1000229
- Improper Neutralization of Input During Web Page Generation in Select2 - CVE-2016-10744
You might also like:
See something that needs correcting? Let us knowUpdated August 28, 2023


